Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eb294d0-cb18-32db-a2dd-91c3078f86f6.roa
File:                     9eb294d0-cb18-32db-a2dd-91c3078f86f6.roa (raw, json)
Hash identifier:          +X/YxqQrNmhvTedc8RCTy5SSvqitwntWK+LFUkUPc3Q=
Subject key identifier:   24:29:C1:9B:DF:5C:29:A2:F0:DB:33:8A:6B:5A:99:D6:F0:BD:2A:B7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EA5A0C35C6B1847605BE1C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eb294d0-cb18-32db-a2dd-91c3078f86f6.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.218.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:0c:35:c6:b1:84:76:05:be:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=b697ef99-871b-415c-b32b-f3d748270d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4a:75:36:40:a6:8b:cb:0d:3e:21:db:23:7d:
                    76:1f:5c:26:87:7a:1c:06:ee:a4:ea:12:11:4a:8e:
                    c9:7b:a2:4d:3e:71:c5:d8:ff:8d:1b:56:0f:bc:fe:
                    60:a2:39:f5:e9:04:46:aa:21:1a:80:49:7d:76:20:
                    e5:19:89:c6:ec:a8:f7:65:a0:22:4c:1d:45:b2:3a:
                    2f:11:ca:89:25:55:6f:2e:57:47:38:09:95:a4:65:
                    6f:b9:cc:5e:36:d8:05:04:b4:9f:c3:4b:8d:4e:00:
                    3b:07:79:b1:e6:5e:79:02:0d:e0:09:5f:13:52:a0:
                    1f:cb:d8:82:f8:3f:64:46:f7:71:31:cb:a7:d3:7c:
                    f2:23:25:ce:05:52:fa:91:4b:6c:e4:0e:db:9e:b1:
                    48:89:ab:b7:d0:07:3c:06:b5:d7:73:ed:2c:37:8e:
                    36:1c:32:be:cf:e1:cc:f9:42:0a:84:dc:00:db:1e:
                    a3:be:76:8f:a4:37:c1:da:7f:6d:cf:83:f8:e9:1c:
                    d5:ed:d9:39:5e:55:a1:53:be:f1:57:3d:da:75:74:
                    bc:0b:81:8b:7d:75:4b:37:02:13:ae:a9:c8:a3:96:
                    49:df:6d:d1:57:7d:ac:8d:46:a5:3d:4a:68:8b:7a:
                    9a:e1:bc:9f:2d:db:84:73:0b:73:a7:69:40:7c:3c:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:C1:9B:DF:5C:29:A2:F0:DB:33:8A:6B:5A:99:D6:F0:BD:2A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eb294d0-cb18-32db-a2dd-91c3078f86f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ce:56:76:7a:96:b1:e3:9b:3c:8a:27:a4:80:f1:11:65:58:
         3c:f6:6c:1e:9a:55:20:82:cb:fb:0d:0c:5f:73:c7:88:e1:74:
         d9:6e:02:69:d6:fb:b2:4a:82:85:f9:68:46:69:9e:3d:ae:3b:
         e2:48:9b:3a:32:d0:66:a2:e4:8c:89:27:20:96:c7:a1:4f:44:
         e0:7a:bf:c9:fc:d4:a5:6c:df:eb:4d:14:6b:81:97:38:c5:c2:
         01:f6:6b:b8:8d:c1:56:1b:fc:7b:40:f9:9a:31:f6:bc:7d:69:
         bf:7b:ac:2c:29:2e:41:84:52:b2:22:01:5e:1f:ce:f6:52:8a:
         59:83:b0:e9:e9:c0:35:15:32:25:e5:da:4a:59:dd:25:67:d0:
         33:4e:84:8c:e0:9d:04:96:30:71:a9:91:d9:48:27:18:e9:1f:
         2e:d0:fd:30:6f:eb:b4:d4:ff:4d:e1:03:21:e5:cc:45:86:3a:
         69:a0:c9:42:41:55:d0:f6:09:ba:a3:f7:fa:d9:0e:06:3f:08:
         26:a6:4c:87:ee:d5:f5:5c:d0:db:fa:66:4f:9b:89:c8:dd:0b:
         ea:7b:d8:b0:be:b5:5c:71:73:6a:3f:db:0d:28:ba:84:38:1f:
         08:40:2a:c9:4b:61:24:9f:5d:56:63:8d:16:78:a3:a0:00:61:
         df:98:ab:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWgw1xrGEdgW+HIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk
YjY5N2VmOTktODcxYi00MTVjLWIzMmItZjNkNzQ4MjcwZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kp1NkCmi8sNPiHbI312H1wmh3ocBu6k6hIR
So7Je6JNPnHF2P+NG1YPvP5gojn16QRGqiEagEl9diDlGYnG7Kj3ZaAiTB1Fsjov
EcqJJVVvLldHOAmVpGVvucxeNtgFBLSfw0uNTgA7B3mx5l55Ag3gCV8TUqAfy9iC
+D9kRvdxMcun03zyIyXOBVL6kUts5A7bnrFIiau30Ac8BrXXc+0sN442HDK+z+HM
+UIKhNwA2x6jvnaPpDfB2n9tz4P46RzV7dk5XlWhU77xVz3adXS8C4GLfXVLNwIT
rqnIo5ZJ323RV32sjUalPUpoi3qa4byfLduEcwtzp2lAfDwbKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQpwZvfXCmi8NszimtamdbwvSq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWViMjk0ZDAtY2IxOC0z
MmRiLWEyZGQtOTFjMzA3OGY4NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9qeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfOVnZ6lrHjmzyKJ6SA8RFlWDz2bB6aVSCCy/sNDF9zx4jhdNluAmnW
+7JKgoX5aEZpnj2uO+JImzoy0Gai5IyJJyCWx6FPROB6v8n81KVs3+tNFGuBlzjF
wgH2a7iNwVYb/HtA+Zox9rx9ab97rCwpLkGEUrIiAV4fzvZSilmDsOnpwDUVMiXl
2kpZ3SVn0DNOhIzgnQSWMHGpkdlIJxjpHy7Q/TBv67TU/03hAyHlzEWGOmmgyUJB
VdD2Cbqj9/rZDgY/CCamTIfu1fVc0Nv6Zk+bicjdC+p72LC+tVxxc2o/2w0ouoQ4
HwhAKslLYSSfXVZjjRZ4o6AAYd+Yq94=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:20 2024 by rpki-client on console-fra.rpki-client.org